All projects matching “spf”

Change watch for spf authorizes freshdesk: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Email authentication posture check: parses SPF, DMARC and DKIM plus MX for any domain and grades deliverability/anti-spoofing gaps (SPF +all, SPF >10 lookups, DMARC p=none, missing DKIM). Clean JSON for deliverability and security-ops automation.

InboxGuards Email Test: Email security fix plan: the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. Reads the domain's live MX, NS, SPF, DKIM and DMARC records, detects the mailbox provider and DNS host, and returns the exact records to publish in order (create / replace / keep, name, value, why): one merged SPF within the 10-lookup limit, DKIM records or the provider

Email authentication check (SPF, DKIM, DMARC): Check a domain's email authentication and spoofing risk from public DNS: MX and mail provider, SPF (record, all-qualifier, DNS lookup count vs the 10 limit), DMARC policy/pct/rua, DKIM at 30 common selectors, MTA-STS, TLS-RPT, BIMI. Returns grade, spoof

Parse a pasted SPF record without DNS (RFC 7208): mechanisms with qualifiers and values, modifiers, syntax errors, the all policy and the number of terms that need DNS lookups, with coded findings such as +all, ptr and over ten lookups. Use when an agent must check an SPF record before publishing it. Input: {"record": "v=spf1 mx include:_spf.example.com ~all"}.

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do list.

Check whether a domain or email address is trustworthy before you contact it, sign it up, or trust it. Returns a trusted/caution/high_risk/unknown verdict with reasons, based on DNS and mail health (MX, SPF, DMARC), domain age and registrar (RDAP), and disposable, free-provider and typo-lookalike flags. Accepts a domain, URL or email address.

Agent intents: verify signup email · is disposable? · check DMARC before outreach · role-account risk. One call returns syntax, MX, SPF, DKIM, DMARC, disposable, role, provider, score 0-100, light domain enrichment, and recommend accept|challenge|reject with reasons. Production 0.10 USDC; demo free rate-limited. x402 on Base for AI agents.

Email intelligence for a company domain: mail provider (Google Workspace, Microsoft 365, Proofpoint...), catch-all status, SaaS tools revealed by SPF (HubSpot, Salesforce, Zendesk, SendGrid...), DMARC policy, public email addresses found on the company's own website with source URLs, and the likely address pattern. Useful before cold outreach or for tech-stack prospecting.

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

Mail Security Tools API: Prepaid email setup watch: up to 25 domains for 30 days, webhook on change. Pay once, then each domain's SPF, DMARC, DKIM (common selectors), MX and score are re-checked about once a day for 30 days. When something changes or breaks you get an HMAC-signed JSON POST at your https webhook_url (event watch.changed, kind changed|broke, before/after). A watch.created POST is se

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

DNS lookup: A/AAAA/MX/TXT/NS/CNAME/SOA/CAA, SPF and DMARC presence

B2A Email Deliverability, MX, SPF & DMARC Verifier (/v1/email-verify) — Validates email syntax, disposable/burner provider status, role accounts, and live DNS MX/SPF/DMARC records. (https://email-verify.agentdiet.dev/v1/email-verify)

Domain-level contact preflight with MX provider, SPF, DMARC and structured risk signals. Does not claim mailbox existence.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Email authentication check for a domain: SPF, DMARC policy and common DKIM selectors, with findings and a verdict.

Check an email address or domain: MX records, mail provider (Google/Microsoft/Zoho), SPF, DMARC policy, disposable-domain flag and a 0-100 deliverability score. Validate leads before sending.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

Extract clean, boilerplate-free readable text from one known public HTTP(S) URL for LLM research or RAG ingestion; private, local, authenticated, paywalled, or blocked resources are not supported. USE WHEN: agent already knows the URL and needs clean page text. DO NOT USE WHEN: agent needs web search, multi-page research, comparison, structured web workflow, or change detection. USE web-intelligen

One DNS Doctor propagation watch: a name is re-checked across six vantage points for a paid window of up to 24 hours, polled by handle.